Data controller
On this website and in your correspondence with us, your personal data is processed by Nervay Teknoloji A.Ş. (“Nervay”) as the data controller.
- Address
- Kirazlıdere Mah. Eski Ankara Cad. İdari Bina A-1 Blok No:4A-1, Çekmeköy/İstanbul
- info@nervay.com
When you visit this website
This website uses no cookies, analytics or advertising tools, and loads nothing from other websites. The simulations and the value calculator run in your browser; we do not keep the values you enter.
To deliver the pages, Vercel Inc., which hosts our website, processes the technical details your browser sends with every request (IP address, browser type, the page requested and the time). They are used only to run the website and to protect it from misuse; Nervay keeps no visitor records of its own.
The value calculator’s report carries what you entered in the page’s address: anyone you share the report link with sees it too.
When you write to us
When you write to us by e-mail or through the website’s “Talk to Nervay” link, we process what you share in your message (your name, e-mail address, company and the content of your message) to answer you, to prepare the meeting or the proposal you ask for, and to run our business relationship.
How we process what you share in a partner application is explained separately in the privacy notice for partner applications.
When you use the Nervay platform
Companies that use the Nervay platform upload their own data to it. The customer is the data controller of that data; Nervay processes it only under its contract with the customer and on the customer’s instructions, as a data processor.
- To let you sign in, the details of the account opened for you are processed: your name, your e-mail address and your sign-in records.
- The platform’s data is kept on our server in Turkey.
- A backup is taken every night. Backups are encrypted before they leave the server and are stored in Google Drive; only Nervay holds the key, and no one — Google included — can open these files without it.
- AI features work only when the customer turns them on and connects its own AI provider; then the data needed to answer a question is sent to the provider the customer chose.
- We do not sell our customers’ data, use it for advertising or process it for anything outside the purposes set in the contract.
Our Google Drive connection
Nervay uses the Google Drive API to store its encrypted backups in Google Drive, in Nervay’s own Google account. The connection uses Google’s “drive.file” permission: it can see only the backup files Nervay itself uploads, and it does not access any other file in the Drive or any other Google data.
We use information received from Google APIs only to upload, verify and restore the backups and to delete expired ones; we do not transfer it to anyone, sell it or use it for advertising.
Nervay’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Legal bases
Under KVKK Article 5(2), we process the personal data we control because it is:
- directly related to entering into or performing a contract (point c): answering your request, preparing a proposal and performing our contract
- necessary for us to meet a legal obligation (point ç)
- necessary to establish, exercise or defend a right (point e)
- necessary for our legitimate interests, without harming your fundamental rights and freedoms (point f): running and securing the website and contacting you
Where the GDPR applies, the corresponding bases are Article 6(1)(b) — a contract, or steps taken at your request before entering into one — Article 6(1)(c) — a legal obligation — and Article 6(1)(f) — our legitimate interests.
If we wish to send you newsletters or promotional messages, we will ask for that separately, and it will be optional.
Who we share it with
We share personal data only for the purposes above, and only as far as needed, with:
- Vercel Inc., which hosts our website, and the provider of our e-mail service
- the provider in Turkey that hosts our platform’s server
- Google, whose Google Drive service stores the encrypted backups
- for the AI features a customer turns on, the AI provider the customer chose
- public authorities that are legally entitled to request it
The servers of Vercel, our e-mail provider and Google may be outside Turkey. Any transfer abroad is made only under the conditions of KVKK Article 9 and, where the GDPR applies, with appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We do not sell personal data or share it with third parties for marketing.
How long we keep it
- Website visits: Nervay keeps no visitor records.
- Correspondence: until your request is settled and our business relationship ends, then for the periods the law requires
- Platform data: for the period set in our contract with the customer
- Backups: 7 days on the server, 30 days in Google Drive
At the end of these periods personal data is erased, destroyed or anonymised.
Your rights
Under KVKK Article 11 you may ask us to:
- tell you whether your personal data is processed and, if so, give you information about it
- tell you why it is processed and whether it is used for that purpose
- tell you the third parties it is transferred to, in Turkey or abroad
- correct it if it is incomplete or inaccurate
- erase or destroy it under the conditions of KVKK Article 7
- tell the third parties it was transferred to about a correction, erasure or destruction
- reconsider a result against you that comes solely from automated analysis
- compensate you for damage caused by unlawful processing
Where the GDPR applies, you also have the rights of access, rectification, erasure, restriction of processing, objection and data portability, and you may lodge a complaint with a supervisory authority — in Turkey the Personal Data Protection Authority (KVKK), or the authority of the EU country where you live or work.
For data on the platform, send your request to the company that is its data controller; if your request reaches us, we pass it on to that company and help it answer.
How to contact us
To use your rights, send us your request in one of these ways:
- In writing: Kirazlıdere Mah. Eski Ankara Cad. İdari Bina A-1 Blok No:4A-1, Çekmeköy/İstanbul
- By e-mail, from an address you have given us before and that is in our records: info@nervay.com
We answer as soon as possible and within 30 days at the latest, free of charge; if your request involves a separate cost, a fee set by the Personal Data Protection Board may be charged.